کنفرانس مهندسی برق ایران

صفحه اصلی / سی و یکمین کنفرانس بین المللی مهندسی برق

A model to measure cyber security maturity at the national level

نویسندگان :

Mahdi Omrani¹ Masoud Shafiee² Siavash Khorsandi³

1- صنعتی امیرکبیر (پلی تکنیک تهران) 2- دانشگاه صنعتی امیرکبیر(پلی تکنیک تهران) 3- صنعتی امیرکبیر (پلی تکنیک تهران)

کلمات کلیدی :

Cyber security،cross-impact analysis،impact،maturity model،key component

چکیده :

Cyberspace is one of the important components of the national security of countries. security evaluation of this space identifies the strengths and weaknesses of systems and networks. through these evaluations, countries can adopt the necessary strategies to improve cyber security. Considering the inefficiency and weakness of the global models for measuring the maturity of cyber security in Iran, it is necessary to achieve a local cyber security maturity model. The aim of the research is to achieve a national cyber security maturity measurement model. In this regard, first by referring to library resources, the dimensions and components of cyber security were identified based on Grounded theory method in five dimensions: architecture, passive defense, active defense, intelligence and diplomacy, also 24 components were identified. Then, by receiving the opinions of six experts about the importance and degree of influence of the calculated components and analyzing their opinions using the Micmac cross-impact analysis software, ten key components of cyber security were selected. Finally, the 30 criteria for measuring maturity were compiled and the degree of maturity of cyber security in Iran was determined. The proposed maturity model was compared with the models in the research literature and its advantages were expressed.